steveej/infra
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

feat: introduce treefmt and fmt all

Browse source
This commit is contained in:
steveej 2024-11-15 10:17:56 +01:00
parent 80250b0179
commit 5d5282a914
213 changed files with 4967 additions and 4423 deletions
Download patch file Download diff file Expand all files Collapse all files

79
nix/os/devices/steveej-x13s/configuration.nix
View file

@ -9,8 +9,9 @@
system,
packages',
...
}: {
nixpkgs.overlays = [nodeFlake.overlays.default];
}:
{
nixpkgs.overlays = [ nodeFlake.overlays.default ];
nixos-x13s = {
enable = true;
@ -23,7 +24,7 @@
# printint and autodiscovery of printers
services.printing.enable = true;
services.printing.drivers = [pkgs.hplip];
services.printing.drivers = [ pkgs.hplip ];
services.avahi = {
enable = true;
nssmdns4 = true;
@ -57,8 +58,8 @@
echo $?
)
'';
requiredBy = ["bluetooth.service"];
before = ["bluetooth.service"];
requiredBy = [ "bluetooth.service" ];
before = [ "bluetooth.service" ];
serviceConfig = {
Type = "oneshot";
RemainAfterExit = true;
@ -98,7 +99,7 @@
enableNonRoot = true;
};
sops.secrets.builder-private-key = {};
sops.secrets.builder-private-key = { };
nix.distributedBuilds = true;
nix.buildMachines = [
# test these with: sudo nix store ping --store 'ssh-ng://nix-remote-builder@<fqdn>?ssh-key=/run/secrets/builder-private-key'
@ -107,9 +108,7 @@
sshUser = "nix-remote-builder";
sshKey = config.sops.secrets.builder-private-key.path;
protocol = "ssh-ng";
systems = [
"x86_64-linux"
];
systems = [ "x86_64-linux" ];
supportedFeatures = [
"big-parallel"
"kvm"
@ -123,9 +122,7 @@
sshUser = "nix-remote-builder";
sshKey = config.sops.secrets.builder-private-key.path;
protocol = "ssh-ng";
systems = [
"aarch64-linux"
];
systems = [ "aarch64-linux" ];
supportedFeatures = [
"big-parallel"
"kvm"
@ -154,24 +151,27 @@
}
# TODO: create syncthing os snippet
(let
tcp = [22000];
udp = [
22000
21027
];
in {
# TODO: upstream feature for inverse rule to work: `! --in-interface zt+`
networking.firewall.interfaces."en+".allowedTCPPorts = tcp;
networking.firewall.interfaces."en+".allowedUDPPorts = udp;
networking.firewall.interfaces."wl+".allowedTCPPorts = tcp;
networking.firewall.interfaces."wl+".allowedUDPPorts = udp;
(
let
tcp = [ 22000 ];
udp = [
22000
21027
];
in
{
# TODO: upstream feature for inverse rule to work: `! --in-interface zt+`
networking.firewall.interfaces."en+".allowedTCPPorts = tcp;
networking.firewall.interfaces."en+".allowedUDPPorts = udp;
networking.firewall.interfaces."wl+".allowedTCPPorts = tcp;
networking.firewall.interfaces."wl+".allowedUDPPorts = udp;
networking.firewall.allowedTCPPorts = [
# iperf3
5201
];
})
networking.firewall.allowedTCPPorts = [
# iperf3
5201
];
}
)
../../snippets/home-manager-with-zsh.nix
../../snippets/sway-desktop.nix
@ -201,22 +201,17 @@
];
system.stateVersion = "23.11";
home-manager.users.root = _: {
home.stateVersion = "23.11";
};
home-manager.users.root = _: { home.stateVersion = "23.11"; };
home-manager.users.steveej = _: {
home.stateVersion = "23.11";
imports = [
../../../home-manager/configuration/graphical-fullblown.nix
];
imports = [ ../../../home-manager/configuration/graphical-fullblown.nix ];
nixpkgs.overlays = [nodeFlake.overlays.default];
nixpkgs.overlays = [ nodeFlake.overlays.default ];
home.sessionVariables = {};
home.sessionVariables = { };
home.packages = with pkgs; [
];
home.packages = with pkgs; [ ];
# TODO(upstream): currently unsupported on x13s
services.gammastep.enable = true;
@ -228,7 +223,7 @@
loader.efi.canTouchEfiVariables = lib.mkForce false;
loader.efi.efiSysMountPoint = "/boot";
blacklistedKernelModules = ["wwan"];
blacklistedKernelModules = [ "wwan" ];
};
hardware.firmware = lib.mkBefore [
@ -258,9 +253,7 @@
autostart = false;
};
services.udev.packages = [
pkgs.android-udev-rules
];
services.udev.packages = [ pkgs.android-udev-rules ];
programs.adb.enable = true;
nix.settings.sandbox = lib.mkForce "relaxed";